Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Set-Cookie
Content-Type
Date
Connection
Server
Cache-Control
Vary
Expires
Content-Length
X-Frame-Options
Strict-Transport-Security
X-Content-Type-Options
Accept-Ranges
Last-Modified
Pragma
X-Powered-By
Link
ETag
CF-RAY
Expect-CT
Via
X-XSS-Protection
X-Cache
Age
Content-Security-Policy
Access-Control-Allow-Origin
Content-Language
X-UA-Compatible
X-Cache-Hits
X-Amz-Cf-Id
X-Served-By
P3P
Referrer-Policy
X-Varnish
X-Xss-Protection
X-Timer
CF-Cache-Status
X-Request-Id
Access-Control-Allow-Headers
X-AspNet-Version
Access-Control-Allow-Methods
X-Download-Options
X-Runtime
Access-Control-Allow-Credentials
P3p
X-Drupal-Cache
X-Check
X-Adblock-Key
Alt-Svc
X-Cacheable
X-Generator
CF-Ray
Content-Security-Policy-Report-Only
X-Amz-Cf-Pop
X-Cache-Status
X-Request-ID
X-AspNetMvc-Version
Status
X-DNS-Prefetch-Control
X-Template
X-Language
Timing-Allow-Origin
Content-Encoding
X-Permitted-Cross-Domain-Policies
X-Iinfo
X-Buckets
X-Content-Security-Policy
X-Turbo-Charged-By
Upgrade
X-Kinja-Server-Push
X-CDN
X-Type
Xkey
Keep-Alive
Access-Control-Expose-Headers
WPE-Backend
X-Pass-Why
Access-Control-Max-Age
X-AH-Environment
X-Backend
X-Cache-Group
X-Server
X-Age
X-Drupal-Dynamic-Cache
X-Pingback
X-Via
X-Nginx-Cache-Status
X-Amz-Request-Id
X-Amz-Id-2
Grace
X-Server-Powered-By
X-Hacker
EagleId
X-UA-Device
X-Robots-Tag
X-LiteSpeed-Cache
X-Varnish-Cache
X-Page-Speed
X-Swift-CacheTime
X-Swift-SaveTime
X-Proxy-Cache
Cf-Railgun
X-Envoy-Upstream-Service-Time
Request-Context
Ali-Swift-Global-Savetime
X-Ua-Compatible
X-Ac
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Device
X-WebKit-CSP
X-Cache-Lookup
Content-Location
X-Amz-Version-Id
X-Server-Id
Surrogate-Control
X-Host
X-Node
X-Cnection
X-Readtime
Report-To
EagleEye-TraceId
X-Rq
Server-Timing
X-Response-Time
X-OneAgent-JS-Injection
X-CST
Feature-Policy
X-Rack-Cache
X-Backend-Server
X-ORACLE-DMS-ECID
X-Application-Context
X-Iejgwucgyu
Request-Id
X-Instart-Request-ID
X-Cloud-Trace-Context
X-Clacks-Overhead
NEL
Edge-Control
Allow
X-DynaTrace
Rating
X-Url
X-EdgeConnect-Origin-MEX-Latency
X-EdgeConnect-MidMile-RTT
X-Country
X-Varnish-TTL
X-Origin-Cache
X-FTR-Request-ID
X-Country-Code
X-Cdn
X-Trace
X-Server-Name
X-B3-TraceId
X-Px
X-DataDome
X-Vhost
X-ESI
X-GitHub-Request-Id
X-ORACLE-DMS-RID
X-VARITI-CCR
X-MS-InvokeApp
RTSS
X-Cached
X-Ruxit-JS-Agent
X-Goog-Hash
SPRequestGuid
Accept-CH
Charset
X-Server-ID
X-PC
X-TtlSet
X-Vname
Pinterest-Generated-By
X-Mod-Pagespeed
X-F-Cache
Public-Key-Pins
X-Use-Magma
X-Kinja-Revision
X-Kinja
Verso
X-Kinja-Server
X-Exp-Id
X-Kinja-Build
X-Exp-Variant
X-Cdn-Fetch
X-GoogleNews-Bot
X-Dispatcher
Arc-Version
X-Mobile-Rewrite
PB-RID
PB-PID
X-SharePointHealthScore
X-D2id
X-TTL
X-T
X-Version
X-Powered-By-Plesk
X-DynaTrace-JS-Agent
X-Abt-Application-Version
X-Powered-CMS
X-DIS-Request-ID
X-Dns-Prefetch-Control
Accept-CH-Lifetime
X-Ser
X-Fastly-Request-ID
Pinterest-Version
X-Pinterest-Rid
X-Upstream-Env
X-Origin-Upstream-Status
X-B
X-Forwarded-Proto
X-Shield-Request-Id
X-Recruiting
X-Client-IP
MS-Author-Via
X-Navigation-Version
DynaTrace
X-SRCache-Fetch-Status
X-SRCache-Store-Status
X-Amz-Rid
Realpath
X-HW
SPIisLatency
SPRequestDuration
X-TEC-API-ORIGIN
X-TEC-API-VERSION
X-TEC-API-ROOT
X-Oneagent-Js-Injection
Content-MD5
X-Upstream
X-Ttl
Nginx-Cache
X-Vcap-Request-Id
X-Goog-Metageneration
X-Goog-Stored-Content-Length
X-Goog-Generation
X-Goog-Stored-Content-Encoding
X-Accel-Buffering
X-Wix-Server-Artifact-Id
X-Amz-Meta-S3cmd-Attrs
Edge-Cache-Tag
AR-CACHE
AR-ATIME
AR-PoweredBy
X-N
X-Hits
Arr-Disable-Session-Affinity
TCN
X-Varnish-Age
X-Debug
X-Oracle-Dms-Rid
X-NF-Request-ID
X-Mrf-Section-Lastmod
Mrf-Cache-Status
MRF-Tech
X-B3-TraceId-Primal
X-Mrf-Item-Lastmod
X-Goog-Storage-Class
Access-Control-Request-Method
X-Acc-Meta-Resource-Type
X-MSEdge-Ref
X-Dw-Request-Base-Id
X-XRDS-Location
S
X-ATG-Version
X-Via-JSL
Service-Worker-Allowed
X-Country-Code-Real
X-FTR-Cache-Status
X-NewRelic-App-Data
X-FTR-Backend-Server
X-FTR-Balancer
X-FTR-Backend
X-FTR-DC
X-FTR-Realm
X-Logged-In
X-FTR-Expires
X-Id
X-HS-Content-Id
Alternate-Protocol
Tracecode
X-HS-Hub-Id
X-PressLabs-Stats
X-Frontend
X-Forwarded-For
Rt-Fastcgi-Cache
X-Kinsta-Cache
X-Content-Digest
Surrogate-Key
Fastly-Restarts
X-Cache-Key
AMP-Access-Control-Allow-Source-Origin
X-RateLimit-Remaining
X-Pad
X-FastCGI-Cache
MicrosoftSharePointTeamServices
X-Content-Options
X-FTR-Cache-Host
Ar-Sid
X-Ruxit-Js-Agent
Server-Name
X-Edge-Location
X-Amzn-Trace-Id
Fastcgi-Cache
X-Analytics
Backend-Timing
FilterID
Host
X-CF-Powered-By
X-Grace
TP-Cache
TP-L2-Cache
X-User-Agent
X-Rid
X-Debug-Info
X-Hostname
X-Whom
X-IPLB-Instance
ServerID
X-Magnolia-Registration
X-Revision
X-Cache-2
X-B3-Sampled
Eomportal-Instance
X-Request-Received
X-Request-Processing-Time
Paypal-Debug-Id
X-Page-Id
X-NWS-LOG-UUID
X-Mobile
AR-Request-ID
X-HS-Cache-Config
Front-End-Https
X-Akam-SW-Version
X-Srv
X-AOL-HN
X-VCache
X-Content-Powered-By
X-URL
X-B-Cache
X-Cache-Hit
X-Signature
X-Litespeed-Cache
X-GUploader-UploadID
X-Varnish-Grace
Retry-After
X-Device-Type
X-LB-Cache
X-SS-Set-Cookie
X-Cluster
X-Handled-By
Source
X-WA-Info
X-Request-Guid
X-Cache-Action
X-App-Environment
X-FB-Debug
Refresh
X-Instance
X-Cache-Control
Cleartype
X-BCube-Filmed-By
X-Varnish-Hostname
X-Platform-Server
X-Tumblr-Pixel
X-Tumblr-Pixel-0
X-Framework
X-Tumblr-User
X-Content-Security-Policy-Report-Only
X-Akamai-Edgescape
X-Fastcgi-Cache
Webserver
X-Zen-Fury
X-Correlation-Id
X-Varnish-Backend
X-Sol
X-Middleton-Display
Display
X-Daa-Tunnel
X-XRDS-LOCATION
X-Cache-Server
X-Varnish-Server
Healthy
X-AppVersion
X-Az
VIX-Pulpo-Node
X-Content-Type
VIX-Pulpo-Upstream-Status
X-Activity-Id
X-TA-CDN-Provider
X-Drupal-Cache-Tags
X-Cache-Rule
X-Drupal-Cache-Contexts
X-Wix-Request-Id
X-Seen-By
ViewerVersion
X-Generated-By
X-Geo-Country
S-Cnection
Response
X-Middleton-Response
X-Cached-By
X-App-Server
Server-Node
Cache-Status
X-Accel-Expires
X-DataStream-Cache-Status
X-CACHE-GROUP
X-Origin-Server
X-Amzn-RequestId
X-Amz-Apigw-Id
X-TT
X-Cache-Age
Upgrade-Insecure-Requests
X-Amz-Replication-Status
X-Node-Name
X-Esi
GEO-INFO
X-Response-Served-From
X-S
Payment
X-RequestSource
X-Cacheable-TTL
X-UA-Device-Type
X-Locale
Actual-Object-TTL
Filters
NGB
X-Cache-NE
Viewport
X-Contextid
Host-Header
X-Varnish-IP
X-Edge-Cache
ServedBy
X-Edge-Cache-Key
X-Servedby
HostName
X-Jobs
X-WPE-Loopback-Upstream-Addr
X-TX-ID
X-FW-Static
X-FW-Type
X-TT-TIMESTAMP
X-Tumblr-Pixel-2
AsisCache
X-FW-Server
X-Status
X-Amz-Server-Side-Encryption
X-Tumblr-Pixel-1
X-Varnish-Hits
X-FW-Serve
X-GeoIP
Access-Control-Allow-Method
X-FW-Hash
Accept-Charset
X-UUID
X-WebKit-CSP-Report-Only
Server-Info
Cache
X-Storage
X-Adobe-Loc
X-Adobe-Content
X-Vg-Webcache
SRV
X-CLOUD-TRACE-CONTEXT
X-Rendered-As
X-Cache-TTL-Remaining
X-PHP-Backend
X-Cache-Remote
X-Hyper-Cache
X-Croise-Owner
From-Origin
X-HS-Combine-CSS
X-APP-VERSION
MS-CV
X-Cache-Operation
Cache-Tv-Group
X-App-Version
X-Webkit-CSP
X-Region
Cache-Tag
DC
X-Redis-Cache
Served-By
X-Forwarded-Host
Public-Key-Pins-Report-Only
X-Mode
Liferay-Portal
X-Yottaa-Optimizations
X-Yottaa-Metrics
Fastcgi-X-Cache-Version
Fastcgi-X-Cache
Fastcgi-Useragent
Machine
Meta-Geo
Selected-FE
Xserver
X-Endurance-Cache-Level
X-Human
X-IP
X-Hosted-By
X-Generated
X-Timing-Wait
X-Is-Bot
X-Proxy-Build
X-Path-Route
X-Webstats-RespID
X-Loop
X-Detected-As
X-TNCMS
X-Agile-Age
X-Cache-Var-Map
X-Agile
X-RN-RSRV
X-Request-Time
X-Akamai-Request-ID2
X-Agile-Id
X-Site-Version
X-Cache-Var
X-Zipkin-Id
Now
Cache-Name
TWC-Device-Class
TWC-Connection-Speed
S-Rt
Origin-Cache-Control
X-Routing-Service
Origin-Edge-Control
X-Proxied
Property-Id
X-ProxyCache-Key
X-Upgrade-Enabled
X-NGENIX-Cache
X-Environment-Context
X-Format
X-Grey
X-ProxyCache-Status
TWC-Locale-Group
X-Cache-Category-Id
Webcakes-App-Version
Webcakes-Region
X-BYPASS-REASON
X-Internal-Host
X-JoinUs
X-Pc-Appver
X-Pc-Hit
X-Pc-Key
X-Origin-Hint
TWC-GeoIP-LatLong
X-L-Path
X-Labrador-Cache-Channel
Webcakes-App-Name
TWC-GeoIP-Country
TWC-Privacy
Powered-By-ChinaCache
X-UA
Pagespeed
X-FC-Vary-Parameters
X-CDN-Cache
Datacenter
X-Birta-Cache-Post
X-Birta-Served
X-NCache
X-OCL
X-Via-Fastly
X-Viewer-Country
X-Web-Node
X-Vgn-Hpd-Reason
X-Pubstack
X-Origin-Host
X-PCL
X-Proxy
X-Akamai-Transformed
X-Original-Request
Cache-Tags
X-Xfnlog-Site
X-CCM
X-Upstream-CT
DB-Nickname
X-Access
X-Backend-Name
X-Upstream-HT
X-Www-Served-By
X-Rule
X-Ocache
X-Origin-CC
X-Section
X-Time-Microsecs
X-Via-CDN
X-Tumblr-Pixel-3
X-Akamai-Request-ID
X-Cache-Config
X-VG-TLSProxy
X-ServerID
X-Origin-Response-Time
X-Origin
Azure-InstanceId
Azure-SiteName
HitType
X-Tb
X-Newrelic-App-Data
Azure-SlotName
Azure-RegionName
Azure-Version
Mn-Server-Ip
X-TIME
X-RemovedCookies
OT-Force-Account-Verify
X-RateLimit-Limit
X-ProcessESI
X-App-Name
Accept-Language
X-Sorting-Hat-PodId
X-Sorting-Hat-ShopId
X-Alternate-Cache-Key
X-ShardId
X-ShopId
X-Shopify-Stage
X-B3-Spanid
Cache-Key
X-Nginx-Cache
X-Guploader-Uploadid
X-Cache-TTL
X-Ezoic-Cdn
X-Protected-By
X-Parent-Response-Time
X-CACHE-KEY
Vix-Hermes-Req-Id
User-Cache-Control
X-Edge-IP
L5d-Success-Class
X-Correlation-ID
X-OVcl-Cache
X-OVcl
X-Real-IP
Content-Script-Type
Content-Style-Type
Time
X-Kong-Proxy-Latency
NtCoent-Length
X-Kong-Upstream-Latency
LB
X-Real-Ip
X-Amz-Meta-Surrogate-Control
X-PERF
X-BACKEND-TTL
X-ApacheServer
X-Cache-Backend
X-Front
X-Webkit-Csp
Ms-Operation-Id
X-Proto
X-RTag
X-Pc-Date
X-Pc-Host
X-GRACE
X-Mshield-Cache-Status
X-Mrs-Age
X-Mrs-Cache
X-Unique-Id-Primal
X-Mrs-Cache-Hits
X-FB-TRIP-ID
X-Cdn-Forward
X-Hit
X-Varnish-Cacheable
X-Dynatrace-Js-Agent
X-CDN-Forward
X-Varnish-Beresp-Status
Section-Io-Cache
X-Content-Age
X-Varnish-Beresp-Grace
X-Debug-Cache
X-Sucuri-ID
X-Nc
WZWS-RAY
AR-SID
X-Unique-ID
X-Trace-Id
Country
Version
Load-Balancing
Fusion-Component-Id
X-Microcachable
Fusion-Content-Id
Fusion-Content-Source
Fusion-Template-Id
Fusion-Source
Access-Control-Request-Headers
Ohc-File-Size
X-Varnish-Beresp-Ttl
X-Cache-Enabled
X-Connection-Hash
X-Time
X-Transaction
X-EdgeConnect-Cache-Status
X-Twitter-Response-Tags
X-MP-GENERATED-AT
Warning
Mail-Subject
We-Hiring
X-C
X-Cache-Host
Rendered-Blocks
X-Cache-FS-Status
Release
X-CF-Lambda-Fn
X-Crawler
X-Clientip
X-CUA
Meta-Geo-Continent
X-D
X-CF-Lambda-Version
Mobile-Detection-Method
Powered-By
X-Cache-URL
Platform
Node
X-Cache-Id
UCS
X-A-Dcw
X-A-Dgt
MD5-Digest
X-A-Ccd
Is-Eu
X-A
X-A-Wwc
Locale
X-BB-ID
X-Application
X-Aed
Memcached
X-Accel-Expires-Debug
X-Actual-URL
VivaBuild
X-Bip
SD-X-WS
Server-ID
Rt-Proxy-Cache
RNT-Time
RNT-Machine
X-Cache-Bucket
SS
Uber-Trace-Id
V-Age
Viewtype
X-B-Cookie
X-Auto-Login
X-Backend-State
Resin-Trace
X-NU-AKA-ACS-Version
X-ScT
X-S-Maxage
X-S-Cookie
X-Served-From
X-Server-By
X-SRCache-Key
X-Server-Time
X-Rojux
X-Rewrite-Enabled
X-Response-By
X-Request-UUID
X-Returned-From
X-Returned-From-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Returned-From-DLL
X-Store
X-Thanos
X-Via-Edge
X-VG-WebServer
X-Via-SSL
X-We-Are-Hiring
Xc-Version
X-WebServer
X-Varnish-Action
X-Variation
X-UE-Client-Country
X-Trv-Group
X-Urbn-Context-Path
X-Urbn-Site-Id
X-Var-Ttl
X-User
X-Release
X-Region-Sid
X-Generated-In
X-G
X-From
X-GeoIP-Country-Code
X-Layer
X-Li-Pop
X-Li-Fabric
X-F5-Cache
X-External-Request-Id
X-Developer
X-Destination
X-Device-Os
X-Died
X-DPWN-IS-SECURE
X-Dispatcher-Server
X-LI-Proto
X-LI-UUID
X-PHP-Host
X-PAYTM-SRV-ID
X-Qloud-Router
X-RCS-CacheZone
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Passed-To-PostProcessResponse
X-Passed-To-DLL
X-Node-Id
X-Logtrace-Id
IBM-Web2-Location
X-Org
X-Passed-To-BeforeDispatch
X-Passed-To
X-Date
X-A-Dam
Cache-Prefix
Frame-Options
Fastly-SIE
BehaviorPad-Version
Fly-Cache
Ajk
Adler-Geo
Fastly-SWR
X-Ua
X-Ratelimit-Limit
Ec-Rule-Version
Arc-Country
Fastly-Backend-Name
X-Dc
Fly-Request-Id
X-Hl-Ver
Countrycode
X-Rocket-Nginx-Bypass
Backend
Apple-News-Services-Request-Url
Who
X-SVT-ORM-RULES
Country-Code
X-SVT-ORM-VERSION
Web-Mar-Node
Backend-Name
X-Gen-Mode
X-Swa-Ws
X-Eu-Site
X-Cache-Debug
X-Epic-Correlation-Id
X-CGP
Www
X-Cache-Expires
Origin
X-Fetched-On
X-Block-Status
True-Client-Country-4JS
Apple-News-Services-Handled
Apple-News-Services-Host
X-Amz-Meta-Cache-Control
X-V
X-Via-NSCOPI
X-Geo
X-FW-Version
Apple-News-Services-Parsed-Url
X-Request-Start
Kp-EeAlive
HA-Cloudapp
HA-Geocity
GMS-Ver
HA-Geocountry
X-Sf
X-Key
X-Server-Group
HA-Urlpath
HA-Georegion
HA-Geolon
HA-Geolat
Ha-Gx-Prefs
HA-Host
HA-Servedtime
HA-Ipaddr
X-Info
X-Server-IP
Request-EU
Request-Country
Proxy-Connection
X-Proxy-Cache-Status
X-IN-SSL-APIGATEWAY
Esi-Enabled
X-IN-APIGATEWAY
X-Reboot
Server-Host
Pramga
X-Proxy-Upstream
On-Server
X-Hash
X-Stale
X-IN-WAF
X-Hnp-Log
User-Agent
X-NODE
IsBot
Thinkindot-CacheControl
X-Distil-CS
Thinkindot-CacheControl-Type
X-Wikidot-Backend
X-UnsetCookies
X-ServiceProvider
X-Irp-Debug
Thinkindot-Control
X-MI-In-Market
X-Wikidot-Static-Cache
X-Location
X-NWS-UUID-VERIFY
AKAMAI
X-Nginx-Cache-Key
Pragrma
X-P-T
Decoy-Debug-TTL
X-Goog-Meta-Goog-Reserved-File-Mtime
Content-Disposition
Decoy-Debug-Key
Decoy-Debug-Status
X-Phone
MI-Cache-Age
GW-Server
X-Platform
Heartbleed
X-Policy
X-TT-LOGID
MI-Cache
MI-API
CDCHOST
X-Request-URI
X-SIPLIST1
X-Thinkindot-L3
Cache-Cookie-Set-From
X-Secret
X-Matched-Rule
X-Core-Value
X-Gannett-Site-Version
Cache-Cookie-Set-Lfrom
Cache-Cookie-Set-Idcheck
X-Cache-CFC
X-No-Session
Request-Time
Server-Int
Fastly-SSL
X-Be
V-Cache
X-DC
Group
X-CACHE-AGE
X-Refresh
Magicmarker
X-Origin-Date
X-MSEdge-Flight
X-Origin-Expires
X-Up
PFcat
X-MSEdge-Features
X-Fstrz
HitInfo
X-Page-Type
X-Core-Mission
X-Distributor
X-VCT
X-Servername
X-NX-Host
X-GeoIP-City
X-Backend-Host
X-Instance-Name
REQUESTUUID
Fastly-Soc-X-Request-Id
X-Origin-TTL
X-Backend-Url
X-Debug-Cookies
X-Debug-Log
X-Developers
Pagetype
X-ElasticPress-Search
X-NC
X-COUNTRY
X-Sn-Servicetimems
X-Planisys-CDN-Rules
X-Planisys-CDN-TTL
X-Fastly-Cache
X-Cdn-Origin
X-Planisys-CDN-Cache
X-Debug-Cache-Expiry
X-Micro-Cache
RequestId
X-Debug-Cache-Fetch
Host-ID
X-Debug-Cache-Store
X-Pjax-Url
X-VarnPar1
X-Req
X-Svr
X-VarnCache
X-PARISIEN-Cache-Rendered
PageSpeed
X-Newrelic-Synthetics
X-BBXSRF
X-Instart-Info
MIME-Version
X-Powered-By-ANYU
X-EIG-Tracking-Id
X-Level-Front-Cache
ServerName
X-Generated-On
Lfy
X-Datadome
Cache-Provider
Ohc-Response-Time
X-Server-Cache
X-Cache-Info
X-Cdn-Srv
X-ARC
Mime-Version
X-Gdpr
Cteonnt-Length
Cdn
PICS-Label
Memory
X-TWH-CORRELATION-ID
X-Servedbyhost
X-Cluster-Node
Nel
CF-IPCountry
X-CMS-Context
X-Wa
FSS-Cache
X-LAGOON
FSS-Proxy
X-Aicache-OS
X-WR-MODIFICATION
X-StackifyID
X-Sentry-ID
X-Fastly-Country-Code
X-NodeID
X-Load-Cache
NGX
GeoIP-Country-Code
CDN
GeoIP-Latitude
X-HTML-Minification-Powered-By
X-Hello
X-ABtesting
X-Flog
X-VServer
X-B3-Traceid
SN
X-CSRF-TOKEN
X-Fastly-Backend-Reqs
Geoip-Latitude
XServer
GeoIp-Country-Code
X-UPSTREAM-Address
X-Varnish-Beresp-TTL
X-GZip
X-WA
X-APP
X-Check-Cacheable
TSSecure
X-Source
Amp-Access-Control-Allow-Source-Origin
Processtime
X-CSRF-Token
X-ID
X-Csrf-Token
X-FireWall-Port
X-SRV
X-MServer
X-HOST
X-Worker
X-DataStream-MidMile-RTT
X-DataStream-Origin-MEX-Latency
Cf-Ipcountry
X-Ratelimit-Remaining
PageType
CACHE
X-Unique-Id
WP-Super-Cache
X-Sedo-Request-Id
X-RateLimit-Limit-Second
X-RateLimit-Remaining-Second
X-Generation-Time
X-ServedByHost
X-CDN-Pop-IP
X-Varnish-Cache-Hits
X-Cache-Miss-From
X-CDN-Pop
A
X-Dynatrace
X-SplitTest
X-LJ-Flow-ID
X-Oss-Server-Time
X-Edge-Server
X-Oss-Storage-Class
Cdn-Host
X-AWS-Id
X-Oss-Request-Id
X-Nananana
X-Oss-Hash-Crc64ecma
X-Oss-Object-Type
X-VWS-Id
Cdn-Request-Time
X-Port
X-VC-Cache
X-Backend-TTL
Pics-Label
X-Skip-Cache
X-FORWARDED-FOR
URI
X-Cache-Grace
HTTPS
X-GDPR
X-B3-SpanId
DataCenter
Cache-Hits
Odigeo-Trace-Id
X-Sucuri-Cache
X-IPS-LoggedIn
X-Owner
X-HS-Status
X-Fastly-Cache-Hits
X-Varnish-Authentication
X-Cache-ASPX
X-RCS-Backend
Server-Surrogate-Control
Server-Cache-Control
X-Ms-Version
X-Ms-Request-Id
X-Ms-Blob-Type
X-Swift-Error
X-Ms-Lease-Status
X-BE
X-Varnish-Url
X-PJAX-URL
Dynatrace
Hostname
ProcessTime
X-VG-WebCache
X-Amzn-Remapped-Connection
X-Gen-Id
X-GZIP
X-SN
Requestid
X-From-Cache
X-Amzn-Remapped-Date
X-Instart-Isnd
X-Bug-Bounty
X-ND-Cache
X-Cache-Ttl
X-ORIG-AKA-EDGE
X-Ms-Lease-State
Get-Access-Time
X-VarnPar2
X-Pf-Uncompressing
X-GoCache-CacheStatus
Is-Session-Tracking
X-NGINX-Cache
Serverid
X-Amz-Meta-S3b-Last-Modified
X-Akamai-SSL-Client-Sid
X-PAGE-TYPE
Proxy-Firewall
X-Alicdn-Da-Ups-Status
X-Server-W
X-Varnish-URL
X-LiteSpeed-Cache-Control
X-VC
X-RAMCache
X-Fe
X-ServerName
X-Serial
WebServer
X-Cache-Srv
X-SB
X-ORIG-AKA-COUNTRY-CODE
T-Server
RequestUuid
X-PF-Uncompressing
NodeID
SID
Xet-Cookie
X-HTML-Edge-Cache
X-Akamai-ERPolicy
X-CS
X-Developed-By
Location
X-Akamai-ERRuleID
NnCoection
X-Dw-Trace-Id
X-LiteSpeed-Tag